Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft
File: H4-gq_qNf39-fqANVuoBxwky5gc.mft (raw, json)
Hash identifier: d/p8g49TQ3Lh9RrznpvClDJEbH/k66XDmyKtPyQOQ9g=
Subject key identifier: 90:C5:66:27:A2:98:B7:83:24:4A:57:ED:92:4F:2D:A2:CF:CE:F2:EB
Authority key identifier: 1F:8F:A0:AB:FA:8D:7F:7F:7E:7E:A0:0D:56:EA:01:C7:09:32:E6:07
Certificate issuer: /CN=A91BDD82/serialNumber=1F8FA0ABFA8D7F7F7E7EA00D56EA01C70932E607
Certificate serial: 0E65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft
Manifest number: 0F50
Signing time: Fri 31 Jan 2025 17:42:30 +0000
Manifest this update: Fri 31 Jan 2025 17:42:30 +0000
Manifest next update: Fri 07 Feb 2025 17:42:30 +0000
Files and hashes: 1: H4-gq_qNf39-fqANVuoBxwky5gc.crl (hash: 5K/Po026Zb8ZXTWaQzOc+1PtkNGx+9sTliqjNov8xiw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3685 (0xe65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDD82/serialNumber=1F8FA0ABFA8D7F7F7E7EA00D56EA01C70932E607
Validity
Not Before: Jan 31 17:42:30 2025 GMT
Not After : Feb 7 17:42:30 2025 GMT
Subject: CN=679d0b86-4ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d3:eb:4b:14:a1:78:bc:4c:ad:26:cc:55:8f:
52:b1:cc:53:bf:62:24:0f:52:33:83:19:bb:de:2a:
20:ed:5f:b0:39:f2:17:82:1b:1e:36:dd:c8:e4:95:
fe:64:93:8d:99:ee:c2:79:13:0e:2f:a4:f2:1d:28:
20:ae:83:56:04:b1:79:f5:8b:21:76:82:18:96:83:
e5:9e:53:6d:25:c0:36:12:5c:f2:1f:97:f6:a3:54:
b5:51:79:91:d4:49:98:44:1e:86:49:ca:18:15:71:
7f:a8:bf:15:82:81:c8:9f:ef:ca:be:c9:f7:7e:51:
50:6e:d3:a5:b4:50:14:39:5c:14:ae:7a:12:60:0c:
73:17:e5:d2:63:30:c5:68:79:2b:ae:9c:e5:32:58:
89:7c:ca:53:f8:3f:c4:bb:dc:cb:4e:94:de:88:86:
a7:70:b3:fa:1e:66:2e:55:ca:83:44:ab:b7:ff:e4:
27:4b:dd:54:47:b4:fe:54:a7:45:49:6b:40:ba:59:
c5:0e:db:e6:44:a0:98:18:4e:3f:ea:4c:5b:43:13:
1d:de:cc:e0:0c:0f:90:ee:b3:6f:a0:8f:b7:e0:92:
b5:91:84:0d:98:06:9c:e0:71:1a:7c:b7:85:fe:0b:
10:67:1d:71:2e:81:fc:40:b3:28:e6:22:6c:9b:61:
b3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C5:66:27:A2:98:B7:83:24:4A:57:ED:92:4F:2D:A2:CF:CE:F2:EB
X509v3 Authority Key Identifier:
keyid:1F:8F:A0:AB:FA:8D:7F:7F:7E:7E:A0:0D:56:EA:01:C7:09:32:E6:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:b2:e0:51:93:d2:c8:12:61:f2:63:6d:df:3a:d1:91:2e:9d:
a0:7e:52:50:1f:30:4e:1e:a9:c7:b3:8f:e4:05:a2:d9:a3:1b:
88:75:e6:53:6b:49:80:72:79:9c:5c:02:cb:c9:af:70:1a:de:
a5:2e:20:a7:39:65:3b:7f:22:c3:9e:3a:91:f0:b0:62:78:42:
49:fd:4e:e8:58:2f:9e:e6:fc:e7:6c:3d:45:34:22:c1:a0:5a:
4e:b6:a7:2a:fc:cb:61:be:99:a1:50:97:4f:c0:c5:81:6f:dc:
aa:ab:6c:87:6b:a6:4c:9f:26:7f:c0:86:de:2c:43:f5:47:20:
af:0c:94:93:70:bf:66:33:4d:f0:d8:5d:e8:21:ef:e0:0f:60:
6d:52:2e:52:f0:a5:44:2d:c9:ef:8f:ad:76:58:26:54:f1:d2:
64:b2:31:e4:9b:5b:dd:27:a5:18:1e:ff:d9:9e:44:c8:b5:d8:
df:2e:4c:88:56:bd:ca:88:ff:36:61:90:1b:2b:b9:45:6a:b4:
e2:b8:e1:31:06:a1:6a:68:aa:fd:72:8f:50:78:c7:4d:81:55:
ea:ea:ee:aa:37:2a:e5:0b:14:7b:38:23:32:42:33:a3:81:3c:
62:9e:06:80:76:b6:fb:61:af:ba:f9:db:0a:aa:f1:c7:6e:69:
b8:7f:6c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:09:37 2025 by rpki-client